mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2.4 KiB
2.4 KiB
Anti-Phishing Training Program Plan Template
Program Overview
- Organization: [Company Name]
- Program Owner: [CISO / Security Awareness Manager]
- Start Date: [YYYY-MM-DD]
- Review Cycle: [Quarterly / Semi-annual]
Baseline Metrics
| Metric | Current Value | 6-Month Target | 12-Month Target |
|---|---|---|---|
| Phish Click Rate | % | % | <5% |
| Submit Rate | % | % | <2% |
| Report Rate | % | % | >60% |
| Training Completion | % | 90% | 95% |
| Repeat Offenders | % | % | <3% |
Training Curriculum
| Module | Audience | Duration | Frequency | Platform |
|---|---|---|---|---|
| Phishing Basics | All employees | 15 min | Annual + new hire | |
| BEC/Wire Fraud | Finance | 20 min | Quarterly | |
| Executive Threats | C-suite/VPs | 10 min | Quarterly | |
| IT-Targeted Phishing | IT Staff | 20 min | Quarterly | |
| Credential Protection | All employees | 10 min | Semi-annual | |
| Mobile Threats (Smishing) | All employees | 10 min | Annual |
Simulation Schedule
| Month | Scenario Type | Difficulty | Target Group |
|---|---|---|---|
| Jan | Password reset | Easy | All employees |
| Feb | Vendor invoice | Medium | Finance |
| Mar | IT notification | Easy | All employees |
| Apr | Package delivery | Easy | All employees |
| May | Executive request | Hard | Finance + Admin |
| Jun | Cloud storage share | Medium | All employees |
| Jul | HR policy update | Easy | All employees |
| Aug | Tax document | Medium | All employees |
| Sep | Conference invite | Medium | All employees |
| Oct | Security alert | Hard | IT Staff |
| Nov | Benefits enrollment | Medium | All employees |
| Dec | Holiday promotion | Hard | All employees |
Escalation Policy for Repeat Offenders
| Offense | Action | Responsible |
|---|---|---|
| First click | Just-in-time training + auto-enroll in module | Automated |
| Second click | Enhanced training + coaching offer | Security team |
| Third click | Mandatory training + manager notification | HR + Security |
| Fourth+ click | Access review + remediation plan | HR + IT + Security |
Budget
| Item | Annual Cost |
|---|---|
| Training platform license | $ |
| Simulation platform | $ |
| Content development | $ |
| Program administration | $ |
| Rewards/recognition | $ |
| Total | $ |
Reporting Schedule
- Monthly: Simulation results to security team
- Quarterly: Department-level report to leadership
- Annually: Full program assessment and ROI report to board